Senior WAF Engineer - Shield Web Apps & APIs

Vylor Inc.; Des Moines (IA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Parental leave

Retirement savings plan

Tuition reimbursement

Job summary

Vylor is seeking a Web Application Firewall Engineer to design, evaluate, and manage enterprise security across our applications and APIs. You’ll work with development, infrastructure, cloud, and network teams to implement robust WAF controls, detect threats, and enhance data protection.

Ideal candidates have 7–10 years in WAF technologies, strong knowledge of OWASP Top 10, API security, and hands-on admin experience with Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.

Qualifications

• Bachelor’s degree or equivalent experience preferred.
• 7–10 years of experience with WAF technologies and/or networking.
• Hands-on experience administering enterprise WAF platforms such as Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.
• Deep understanding of OWASP Top 10, API security, bot mitigation, DDoS protection, and web application attack patterns.
• Experience tuning WAF rules, reducing false positives, and balancing security controls with application availability.
• Knowledge of HTTP/S, TLS, DNS, CDN, reverse proxy, load balancing, and web application architectures.
• Experience partnering with application, infrastructure, cloud, and security operations teams.

Responsibilities

• Configure, tune, test, and optimize WAF policies and rules for web apps and APIs.
• Monitor WAF alerts, traffic, and security events to identify threats and investigate anomalies.
• Collaborate with app, infra, cloud, and network teams to implement WAF controls.
• Assist in development and implementation of security policies and procedures.
• Contribute to data security, regulatory compliance and threat detection workflows.
• Prepare status reports and run security risk analysis scenarios.
• Enforce security policies by administering security profiles and documenting controls.
• Provide direct security support to business and IT staff; participate in on-call.

Skills

WAF technologies

Networking

Security monitoring

Threat detection

Education

Bachelor’s degree or equivalent experience

Tools

Akamai

Cloudflare

F5

Imperva

Azure WAF

AWS WAF

Job description

Vylor is seeking a Web Application Firewall Engineer to design, evaluate, and manage enterprise security across our applications and APIs. You’ll work with development, infrastructure, cloud, and network teams to implement robust WAF controls, detect threats, and enhance data protection.

Ideal candidates have 7–10 years in WAF technologies, strong knowledge of OWASP Top 10, API security, and hands-on admin experience with Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.